@agentvault/claude-bridge 0.5.5 → 0.5.6

package/dist/index.js

@@ -65024,145 +65024,140 @@ var init_channel = __esm2({
         }
         const raw = await loadState(this.config.dataDir);
         if (raw) {
-          await backupState(this.config.dataDir);
-          this._persisted = migratePersistedState(raw);
-          if (!this._persisted.messageHistory) {
-            this._persisted.messageHistory = [];
-          }
-          this._deviceId = this._persisted.deviceId;
-          this._deviceJwt = this._persisted.deviceJwt;
-          this._primaryConversationId = this._persisted.primaryConversationId;
-          this._fingerprint = this._persisted.fingerprint;
-          this._lastInboundRoomId = this._persisted.lastInboundRoomId;
-          if (this._persisted.seenMessageIds) {
-            this._seenMessageIds = new Set(this._persisted.seenMessageIds.slice(-_SecureChannel.SEEN_MSG_MAX));
-          }
-          if (this._persisted.seenA2AMessageIds) {
-            this._a2aSeenMessageIds = new Set(this._persisted.seenA2AMessageIds.slice(-_SecureChannel.A2A_SEEN_MAX));
-          }
-          if (this._persisted?.rooms) {
-            const roomConvIds = /* @__PURE__ */ new Set();
-            for (const room of Object.values(this._persisted.rooms)) {
-              for (const cid of room.conversationIds || []) {
-                roomConvIds.add(cid);
-              }
-            }
-            let cleanedCount = 0;
-            for (const cid of roomConvIds) {
-              if (this._persisted.sessions[cid]) {
-                delete this._persisted.sessions[cid];
-                cleanedCount++;
-              }
-            }
-            if (cleanedCount > 0) {
-              console.log(`[SecureChannel] Cleaned ${cleanedCount} stale DR room sessions`);
+          await this._hydrateFromPersisted(raw);
+          this._connect();
+          return;
+        }
+        const restored = await restoreState(this.config.dataDir);
+        if (restored) {
+          console.log("[SecureChannel] Restored state from backup");
+          const restoredRaw = await loadState(this.config.dataDir);
+          if (restoredRaw) {
+            await this._hydrateFromPersisted(restoredRaw);
+            this._connect();
+            return;
+          }
+        }
+        await this._enroll();
+      }
+      /**
+       * Hydrate all in-memory state from persisted creds. The single source of
+       * truth for both the primary boot and the .bak-restore boot, so the two can
+       * never drift (the drift is what caused #416: the backup branch used to skip
+       * MLS group loading and dropped owner MLS DMs). Callers invoke _connect()
+       * after this resolves.
+       */
+      async _hydrateFromPersisted(raw) {
+        await backupState(this.config.dataDir);
+        this._persisted = migratePersistedState(raw);
+        if (!this._persisted.messageHistory) {
+          this._persisted.messageHistory = [];
+        }
+        this._deviceId = this._persisted.deviceId;
+        this._deviceJwt = this._persisted.deviceJwt;
+        this._primaryConversationId = this._persisted.primaryConversationId;
+        this._fingerprint = this._persisted.fingerprint;
+        this._lastInboundRoomId = this._persisted.lastInboundRoomId;
+        if (this._persisted.seenMessageIds) {
+          this._seenMessageIds = new Set(this._persisted.seenMessageIds.slice(-_SecureChannel.SEEN_MSG_MAX));
+        }
+        if (this._persisted.seenA2AMessageIds) {
+          this._a2aSeenMessageIds = new Set(this._persisted.seenA2AMessageIds.slice(-_SecureChannel.A2A_SEEN_MAX));
+        }
+        if (this._persisted?.rooms) {
+          const roomConvIds = /* @__PURE__ */ new Set();
+          for (const room of Object.values(this._persisted.rooms)) {
+            for (const cid of room.conversationIds || []) {
+              roomConvIds.add(cid);
             }
           }
-          for (const [convId, sessionData] of Object.entries(
-            this._persisted.sessions
-          )) {
-            if (sessionData.ratchetState) {
-              const ratchet = DoubleRatchet.deserialize(sessionData.ratchetState);
-              this._sessions.set(convId, {
-                ownerDeviceId: sessionData.ownerDeviceId,
-                ratchet,
-                activated: sessionData.activated ?? false,
-                epoch: sessionData.epoch
-              });
+          let cleanedCount = 0;
+          for (const cid of roomConvIds) {
+            if (this._persisted.sessions[cid]) {
+              delete this._persisted.sessions[cid];
+              cleanedCount++;
             }
           }
-          if (this._persisted.conversationGroupIds) {
-            this._sessionGroupIds = new Map(Object.entries(this._persisted.conversationGroupIds));
-            console.log(`[SecureChannel] Restored ${this._sessionGroupIds.size} conversation\u2192group mappings`);
+          if (cleanedCount > 0) {
+            console.log(`[SecureChannel] Cleaned ${cleanedCount} stale DR room sessions`);
           }
-          if (this._persisted.rooms) {
-            for (const [roomId, room] of Object.entries(this._persisted.rooms)) {
-              const mlsGroupId = room.mlsGroupId;
-              if (mlsGroupId) {
-                try {
-                  const mlsState = await loadMlsState(this.config.dataDir, mlsGroupId);
-                  if (mlsState) {
-                    const mgr = new MLSGroupManager();
-                    mgr.importState(JSON.parse(mlsState));
-                    this._mlsGroups.set(roomId, mgr);
-                  }
-                } catch (mlsErr) {
-                  console.warn(`[SecureChannel] Failed to restore MLS state for room ${roomId.slice(0, 8)}:`, mlsErr);
-                }
-              }
-            }
+        }
+        for (const [convId, sessionData] of Object.entries(
+          this._persisted.sessions
+        )) {
+          if (sessionData.ratchetState) {
+            const ratchet = DoubleRatchet.deserialize(sessionData.ratchetState);
+            this._sessions.set(convId, {
+              ownerDeviceId: sessionData.ownerDeviceId,
+              ratchet,
+              activated: sessionData.activated ?? false,
+              epoch: sessionData.epoch
+            });
           }
-          for (const [convId, entry] of Object.entries(this._persisted.mlsConversations ?? {})) {
-            if (entry.mlsGroupId) {
+        }
+        if (this._persisted.conversationGroupIds) {
+          this._sessionGroupIds = new Map(Object.entries(this._persisted.conversationGroupIds));
+          console.log(`[SecureChannel] Restored ${this._sessionGroupIds.size} conversation\u2192group mappings`);
+        }
+        if (this._persisted.rooms) {
+          for (const [roomId, room] of Object.entries(this._persisted.rooms)) {
+            const mlsGroupId = room.mlsGroupId;
+            if (mlsGroupId) {
               try {
-                const mlsState = await loadMlsState(this.config.dataDir, entry.mlsGroupId);
+                const mlsState = await loadMlsState(this.config.dataDir, mlsGroupId);
                 if (mlsState) {
                   const mgr = new MLSGroupManager();
                   mgr.importState(JSON.parse(mlsState));
-                  this._mlsGroups.set(`conv:${convId}`, mgr);
+                  this._mlsGroups.set(roomId, mgr);
                 }
               } catch (mlsErr) {
-                console.warn(`[SecureChannel] Failed to restore MLS state for conv ${convId.slice(0, 8)}:`, mlsErr);
+                console.warn(`[SecureChannel] Failed to restore MLS state for room ${roomId.slice(0, 8)}:`, mlsErr);
               }
             }
           }
-          for (const [gid, entry] of Object.entries(this._persisted.mlsGroups ?? {})) {
-            if (!entry.mlsGroupId) continue;
+        }
+        for (const [convId, entry] of Object.entries(this._persisted.mlsConversations ?? {})) {
+          if (entry.mlsGroupId) {
             try {
-              const stateJson = await loadMlsState(this.config.dataDir, entry.mlsGroupId);
-              if (stateJson) {
+              const mlsState = await loadMlsState(this.config.dataDir, entry.mlsGroupId);
+              if (mlsState) {
                 const mgr = new MLSGroupManager();
-                mgr.importState(JSON.parse(stateJson));
-                this._mlsGroups.set(`1to1-group:${gid}`, mgr);
-                console.log(`[SecureChannel] Loaded shared MLS group for ${gid.slice(0, 8)} (epoch=${mgr.epoch})`);
+                mgr.importState(JSON.parse(mlsState));
+                this._mlsGroups.set(`conv:${convId}`, mgr);
               }
-            } catch (loadErr) {
-              console.warn(`[SecureChannel] Failed to load shared MLS group ${gid.slice(0, 8)}:`, loadErr);
+            } catch (mlsErr) {
+              console.warn(`[SecureChannel] Failed to restore MLS state for conv ${convId.slice(0, 8)}:`, mlsErr);
             }
           }
-          for (const [channelId, entry] of Object.entries(this._persisted.a2aChannels ?? {})) {
-            if (entry.mlsGroupId) {
-              try {
-                const mlsState = await loadMlsState(this.config.dataDir, entry.mlsGroupId);
-                if (mlsState) {
-                  const mgr = new MLSGroupManager();
-                  mgr.importState(JSON.parse(mlsState));
-                  this._mlsGroups.set(`a2a:${channelId}`, mgr);
-                }
-              } catch (mlsErr) {
-                console.warn(`[SecureChannel] Failed to restore MLS state for A2A ${channelId.slice(0, 8)}:`, mlsErr);
-              }
+        }
+        for (const [gid, entry] of Object.entries(this._persisted.mlsGroups ?? {})) {
+          if (!entry.mlsGroupId) continue;
+          try {
+            const stateJson = await loadMlsState(this.config.dataDir, entry.mlsGroupId);
+            if (stateJson) {
+              const mgr = new MLSGroupManager();
+              mgr.importState(JSON.parse(stateJson));
+              this._mlsGroups.set(`1to1-group:${gid}`, mgr);
+              console.log(`[SecureChannel] Loaded shared MLS group for ${gid.slice(0, 8)} (epoch=${mgr.epoch})`);
             }
+          } catch (loadErr) {
+            console.warn(`[SecureChannel] Failed to load shared MLS group ${gid.slice(0, 8)}:`, loadErr);
           }
-          this._connect();
-          return;
         }
-        const restored = await restoreState(this.config.dataDir);
-        if (restored) {
-          console.log("[SecureChannel] Restored state from backup");
-          const restoredRaw = await loadState(this.config.dataDir);
-          if (restoredRaw) {
-            this._persisted = migratePersistedState(restoredRaw);
-            if (!this._persisted.messageHistory) this._persisted.messageHistory = [];
-            this._deviceId = this._persisted.deviceId;
-            this._deviceJwt = this._persisted.deviceJwt;
-            this._primaryConversationId = this._persisted.primaryConversationId;
-            this._fingerprint = this._persisted.fingerprint;
-            for (const [convId, sd] of Object.entries(this._persisted.sessions)) {
-              if (sd.ratchetState) {
-                this._sessions.set(convId, {
-                  ownerDeviceId: sd.ownerDeviceId,
-                  ratchet: DoubleRatchet.deserialize(sd.ratchetState),
-                  activated: sd.activated ?? false,
-                  epoch: sd.epoch
-                });
+        for (const [channelId, entry] of Object.entries(this._persisted.a2aChannels ?? {})) {
+          if (entry.mlsGroupId) {
+            try {
+              const mlsState = await loadMlsState(this.config.dataDir, entry.mlsGroupId);
+              if (mlsState) {
+                const mgr = new MLSGroupManager();
+                mgr.importState(JSON.parse(mlsState));
+                this._mlsGroups.set(`a2a:${channelId}`, mgr);
               }
+            } catch (mlsErr) {
+              console.warn(`[SecureChannel] Failed to restore MLS state for A2A ${channelId.slice(0, 8)}:`, mlsErr);
             }
-            this._connect();
-            return;
           }
         }
-        await this._enroll();
       }
       /**
        * Fetch scan rules from the server and load them into the ScanEngine.
@@ -65502,7 +65497,7 @@ var init_channel = __esm2({
        */
       sendActivitySpan(spanData) {
         if (!this._ws || this._ws.readyState !== WebSocket2.OPEN) return;
-        const pluginVersion = true ? "0.23.2" : "0.0.0-dev";
+        const pluginVersion = true ? "0.23.3" : "0.0.0-dev";
         const agentName = this.config.agentName ?? "Agent";
         const resource = {
           "service.name": "agentvault-agent",
@@ -67119,7 +67114,7 @@ var init_channel = __esm2({
                 agentVersion: this.config.agentVersion ?? "0.0.0",
                 // __AV_VERSION__ is injected by esbuild from package.json at build time.
                 // Falls back to "0.0.0-dev" in non-bundled contexts (tests).
-                pluginVersion: true ? "0.23.2" : "0.0.0-dev"
+                pluginVersion: true ? "0.23.3" : "0.0.0-dev"
               });
               this._telemetryReporter.startAutoFlush(3e4);
             }
@@ -67429,7 +67424,7 @@ var init_channel = __esm2({
                     agentVersion: this.config.agentVersion ?? "0.0.0",
                     // __AV_VERSION__ is injected by esbuild from package.json at build time.
                     // Falls back to "0.0.0-dev" in non-bundled contexts (tests).
-                    pluginVersion: true ? "0.23.2" : "0.0.0-dev"
+                    pluginVersion: true ? "0.23.3" : "0.0.0-dev"
                   });
                   this._telemetryReporter.startAutoFlush(3e4);
                 }
@@ -97176,7 +97171,7 @@ var init_index = __esm2({
     init_skill_invoker();
     await init_skill_telemetry();
     await init_policy_enforcer();
-    VERSION = true ? "0.23.2" : "0.0.0-dev";
+    VERSION = true ? "0.23.3" : "0.0.0-dev";
   }
 });
 await init_index();
@@ -132918,7 +132913,7 @@ async function main() {
       "[bridge] warning: passing the invite token on the command line is visible to other local users via 'ps'. Prefer: AV_INVITE_TOKEN=\u2026 npx @agentvault/claude-bridge"
     );
   }
-  console.error(`[bridge] version: ${true ? "0.5.5" : "dev"}`);
+  console.error(`[bridge] version: ${true ? "0.5.6" : "dev"}`);
   console.error(`[bridge] data dir: ${cfg.dataDir} (${cfg.dataDirSource})`);
   if (cfg.worker) {
     console.error(`[bridge] WORKER MODE \u2014 workspace: ${cfg.workspaceDir} \xB7 permissions: ${cfg.permissionMode} \xB7 enclave dir fenced`);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentvault/claude-bridge",
-  "version": "0.5.5",
+  "version": "0.5.6",
   "type": "module",
   "description": "AgentVault Claude Bridge — daemon for bridging a Claude agent into secure E2E-encrypted AgentVault 1:1 direct messages and rooms.",
   "main": "dist/index.js",